| |||||||||||||
How Tridge reverse engineered BitKeeperHow Tridge reverse engineered BitKeeperPosted Apr 21, 2005 10:13 UTC (Thu) by kleptog (subscriber, #1183)Parent article: How Tridge reverse engineered BitKeeper
It continues to astonish me how often companies try to hide their systems behind a thin veneer and claim that running an XOR algorithm (or ROT-26) is enough to protect them, when it's trivial to make a foolproof system.
Generate a public/private keypair, stick one in the server, one in the client and encrypt using that. If anyone manages to write a client, you know they copied your key and you can get them. Libraries like libssl even take out all the work for you.
Hell, even symmetric keys would do it.
Not exactly rocket science. Overhead? Sure, no such thing as a free lunch, right?
(Log in to post comments)
|
|||||||||||||